Legal
Privacy policy
Last updated 23 October 2026.
Draft - get this checked before launch. Fill in config.js so the owner name and support email show here.
The data controller is . Contact: .
What we collect, and why
- Your account: your email address and a scrambled (hashed) version of your password - never the password itself. Used to sign you in and to send account emails (confirm email, reset password).
- Your PCs: when you sign in to the app, it sends a random ID it made for that PC and the PC's name, so we can apply the 3-PC limit and show your PCs on your account page. Nothing else about your computer.
- Security logs: a log of account events and short-lived counters (which include IP addresses) to stop password guessing.
- Donations go through the donation service you choose (for example Ko-fi or PayPal), which shares your name and message with us. We only list your name as a supporter if you ask us to.
Legal basis
Providing the service you signed up for, and our legitimate interest in keeping it secure.
Who we share it with
Cloudflare (hosts this website and the sign-in server) and Resend (sends account emails). We don't sell your data, and there's no advertising or tracking.
How long we keep it
Account data until you delete your account. Security logs for 1 year. Rate-limit counters for 2 days.
The app and the mod
The app stores your settings on your PC and downloads Fabric from Fabric's servers. The app and the mod contact mirageclient.com only to sign you in and check you're still signed in. Discord presence talks only to the Discord app on your PC, and only if you turn it on.
Cookies and storage
No cookies or analytics. When you log in, your browser keeps a sign-in token in its own storage until you log out.
Your rights
You can download, correct or delete your data (delete your account on your account page), or object to how we use it, by emailing us. You can also complain to the Information Commissioner's Office (ico.org.uk).
MIRAGE